Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/121748b6-b28e-3952-a897-8fa5cf30ca6f.roa
File:                     121748b6-b28e-3952-a897-8fa5cf30ca6f.roa (raw, json)
Hash identifier:          ruH6lY3HU8dCBcNK34RKL4d6p3NHQa6CAlOI/6QKzVc=
Subject key identifier:   F0:5D:EB:D5:F5:68:A6:E2:62:C7:E2:55:F8:30:32:C4:72:27:24:79
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DAE4FCFE1F2E164EA84CE53C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/121748b6-b28e-3952-a897-8fa5cf30ca6f.roa
Signing time:             Thu 30 Apr 2026 18:33:02 +0000
ROA not before:           Thu 30 Apr 2026 18:33:02 +0000
ROA not after:            Wed 29 Jul 2026 18:33:02 +0000
asID:                     44559
IP address blocks:        166.1.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:4f:cf:e1:f2:e1:64:ea:84:ce:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 18:33:02 2026 GMT
            Not After : Jul 29 18:33:02 2026 GMT
        Subject: CN=9c36a683-4884-49af-9d82-0c244b2844fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:c9:e8:34:bb:8a:93:90:0f:43:ba:4c:e7:
                    73:25:ae:4a:fd:8f:e7:32:eb:22:ae:1a:a5:74:ac:
                    29:bd:d2:84:48:25:30:39:5b:cd:0a:99:c7:91:f7:
                    03:04:31:f4:23:4e:b1:79:d4:63:61:8f:61:79:b3:
                    95:2d:0f:65:76:3f:d5:3c:6e:8f:16:4b:4a:39:23:
                    53:90:17:79:5e:f6:d0:b9:2b:67:f0:98:66:84:b6:
                    03:c6:5d:3b:a7:eb:a9:59:2c:23:94:26:57:c1:78:
                    48:d9:7a:55:b7:a9:6d:bc:15:8d:fd:3b:c5:3b:f5:
                    83:fd:e0:a0:f5:2f:e5:ff:d7:eb:3a:bd:3c:e9:c7:
                    dc:f1:7e:34:32:5e:44:ac:95:c1:dd:68:43:de:bc:
                    f6:38:43:1d:eb:99:ae:ef:2e:4f:0b:df:9a:f1:4d:
                    02:bd:29:38:fe:e7:5d:7d:95:a3:9e:64:d1:f1:36:
                    11:ca:6f:0c:a4:35:67:31:e0:32:35:33:f8:35:d5:
                    17:35:c6:19:d4:ee:9d:19:e6:2a:cf:9c:0c:ac:9d:
                    74:71:b6:bd:bb:69:33:e3:3e:9b:b9:5b:17:19:b0:
                    65:d1:03:8c:95:0f:17:45:e1:68:d1:54:be:6c:4a:
                    13:89:e5:9b:17:8b:9f:c1:d6:72:ba:96:e4:67:df:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5D:EB:D5:F5:68:A6:E2:62:C7:E2:55:F8:30:32:C4:72:27:24:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/121748b6-b28e-3952-a897-8fa5cf30ca6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:06:ae:ee:83:76:78:8d:67:4d:7c:32:f9:6f:44:94:ad:
         6f:28:80:31:30:f3:44:ea:5a:6b:fb:9c:48:eb:e6:00:b3:8c:
         0f:fa:a4:53:17:02:16:c1:0c:bf:d8:89:f3:c8:2b:9e:15:c8:
         29:e4:58:e4:db:85:6f:6f:82:d3:8d:7a:a5:43:07:d3:2a:ed:
         ae:78:cc:e8:71:0a:6c:72:64:06:37:2e:f4:9b:81:60:ef:33:
         87:99:a0:73:cd:59:f2:45:61:93:59:49:d7:23:28:39:75:dd:
         ca:40:12:a0:32:f6:83:d7:fb:a0:29:56:52:71:db:a4:eb:cf:
         79:b4:60:95:ce:98:57:99:01:f7:23:c4:a0:ad:f4:05:f8:e0:
         86:20:88:1a:60:fc:12:57:e2:64:32:01:e4:dc:de:52:6a:e3:
         d7:35:1d:2b:dc:69:3b:ed:99:22:5a:32:9b:cc:f7:73:31:49:
         8c:26:27:13:26:c9:7f:65:34:8f:e9:22:1c:63:1a:8b:e3:e0:
         57:69:39:81:99:30:cb:f9:0a:6d:9e:a9:5d:b7:46:1c:e8:7f:
         d0:15:f2:ab:24:1d:d4:88:4e:9f:01:e6:2d:68:62:41:bf:7a:
         7c:1e:5b:f4:88:11:02:c0:88:2a:84:e6:9d:0e:ae:de:fb:2e:
         f3:c0:2c:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT8/h8uFk6oTOU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQzMDE4MzMwMloXDTI2MDcyOTE4MzMwMlowLzEtMCsGA1UEAxMk
OWMzNmE2ODMtNDg4NC00OWFmLTlkODItMGMyNDRiMjg0NGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnDJ6DS7ipOQD0O6TOdzJa5K/Y/nMusirhql
dKwpvdKESCUwOVvNCpnHkfcDBDH0I06xedRjYY9hebOVLQ9ldj/VPG6PFktKOSNT
kBd5XvbQuStn8JhmhLYDxl07p+upWSwjlCZXwXhI2XpVt6ltvBWN/TvFO/WD/eCg
9S/l/9frOr086cfc8X40Ml5ErJXB3WhD3rz2OEMd65mu7y5PC9+a8U0CvSk4/udd
fZWjnmTR8TYRym8MpDVnMeAyNTP4NdUXNcYZ1O6dGeYqz5wMrJ10cba9u2kz4z6b
uVsXGbBl0QOMlQ8XReFo0VS+bEoTieWbF4ufwdZyupbkZ9+YnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBd69X1aKbiYsfiVfgwMsRyJyR5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTIxNzQ4YjYtYjI4ZS0z
OTUyLWE4OTctOGZhNWNmMzBjYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFf6Bq7ug3Z4jWdNfDL5b0SUrW8ogDEw80TqWmv7nEjr5gCzjA/6pFMX
AhbBDL/YifPIK54VyCnkWOTbhW9vgtONeqVDB9Mq7a54zOhxCmxyZAY3LvSbgWDv
M4eZoHPNWfJFYZNZSdcjKDl13cpAEqAy9oPX+6ApVlJx26Trz3m0YJXOmFeZAfcj
xKCt9AX44IYgiBpg/BJX4mQyAeTc3lJq49c1HSvcaTvtmSJaMpvM93MxSYwmJxMm
yX9lNI/pIhxjGovj4FdpOYGZMMv5Cm2eqV23Rhzof9AV8qskHdSITp8B5i1oYkG/
enweW/SIEQLAiCqE5p0Ort77LvPALIg=
-----END CERTIFICATE-----
Generated at Sat May 2 23:08:15 2026 by rpki-client